Server data from the Official MCP Registry
USPTO patent search and prior art lookup. Not legal advice
About
USPTO patent search and prior art lookup. Not legal advice
Remote endpoints: streamable-http: https://patent-mcp.vercel.app/mcp
Security Report
Patent by Ouroboros is a read-only patent search server that queries the USPTO Open Data Portal and EPO OPS using credentials supplied via environment variables, with OAuth 2.1 and PKCE for client access. The code shows no shell execution, no hardcoded secrets, and no exfiltration of user data to unexpected hosts; the only network targets are the documented patent office, Vercel Blob, and Stripe endpoints. Minor items include the lack of an explicit cap on upstream response size for the JSON path and a few broad error-handling fallbacks that silently swallow errors. Supply chain analysis found 7 known vulnerabilities in dependencies (1 critical, 4 high severity).
3 files analyzed · 11 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
How to Install & Connect
Available as Local & Remote
This plugin can run on your machine or connect to a hosted endpoint. during install.
Documentation
View on GitHubFrom the project's GitHub README.
Patent by Ouroboros
Patent by Ouroboros is a remote MCP server for inventors, startup founders, patent agents and attorneys, and engineers who need to check whether an idea already appears in the public patent record.
It searches United States patent records on the USPTO Open Data Portal. Google Patents is used only as a link. Every patent number in a tool result is copied from a USPTO response. The server does not fill in numbers when USPTO does not answer.
This is not legal advice. It is not a substitute for a registered patent attorney or agent. A result is not an opinion on patentability, infringement, validity, or freedom to operate.
Hosted server
- MCP server URL:
https://patent-mcp.vercel.app/mcp(live, Streamable HTTP, OAuth sign-in) - Health: https://patent-mcp.vercel.app/health
- Protected-resource metadata: https://patent-mcp.vercel.app/.well-known/oauth-protected-resource
- Connect guide: https://patent-mcp.vercel.app/connect
- Docs: https://ouroborosapps.com/docs/patent
- Coverage on the hosted server: United States patents from the USPTO Open Data Portal.
- Registry name:
io.github.LAHutchins91/patent
Connect
The hosted MCP address is https://patent-mcp.vercel.app/mcp. A self-hosted copy uses its own origin plus /mcp. Locally that is http://127.0.0.1:8787/mcp.
Sign in when the assistant opens OAuth. Leave the client id and secret empty. The server supports OAuth 2.1 dynamic client registration and PKCE (S256). Do not paste a password or an office API key into the assistant.
Cursor, in ~/.cursor/mcp.json or a project .cursor/mcp.json:
{
"mcpServers": {
"patent": {
"url": "https://patent-mcp.vercel.app/mcp"
}
}
}
Claude Code:
claude mcp add --transport http patent https://patent-mcp.vercel.app/mcp
ChatGPT, Claude, Gemini, Grok, and any other Streamable HTTP client: add the same URL, choose OAuth, and leave client id and secret blank. Full steps are on /connect.
A new account includes 14 days of search access. After the trial, Pro continues through Stripe Checkout. The amount is shown by Stripe, not in this repository.
server.json is the MCP Registry manifest (io.github.LAHutchins91/patent). Its remotes[0].url is the hosted server, https://patent-mcp.vercel.app/mcp, and its icon is https://patent-mcp.vercel.app/logo.jpg. A self-hosted copy should point both at its own origin.
Tools
search_patents— keywords, claim language, CPC class, assignee, inventor, and datesget_patent— abstract, claims, status, family, and citations for one recordfind_patent_citations— documents that cite a patent, and documents that patent citessearch_prior_art— an idea description in, the closest USPTO records and their Google Patents links out
Citation coverage is the USPTO grant document and USPTO office-action citations. The PatentsView citation graph is paused: USPTO paused the PatentsView PatentSearch API when PatentsView moved to the Open Data Portal on 20 March 2026.
Run locally
npm install
cp .env.example .env
npm run dev
The server listens on port 8787. GET /health returns JSON. billingConfigured is true only when STRIPE_SECRET_KEY, STRIPE_PRICE_MONTHLY, and STRIPE_PRICE_YEARLY are all set.
npm test
npm run typecheck
Tests call the public USPTO host. Office payloads that require a key are mocked. With USPTO_API_KEY in the environment, the live test uses that key instead of expecting the unauthenticated response.
Environment
Lawrence needs to supply:
| Variable | Purpose |
|---|---|
APP_BASE_URL | Public origin used as the OAuth issuer and Stripe return URL |
AUTH_SECRET | Signs browser sessions. Required in production |
USPTO_API_KEY | USPTO Open Data Portal key, sent as X-API-KEY. This is the key the hosted server uses. |
EPO_CONSUMER_KEY | Leave unset on the hosted server. The unused client reads it only when a secret is set too. |
EPO_CONSUMER_SECRET | Leave unset on the hosted server. Search stays on United States patents from USPTO. |
STRIPE_SECRET_KEY | Existing Stripe secret |
STRIPE_PRICE_MONTHLY | Existing monthly price id |
STRIPE_PRICE_YEARLY | Existing yearly price id |
STRIPE_WEBHOOK_SECRET | Stripe webhook signature secret |
STORAGE_BACKEND | memory (default), file, http, or blob |
STORAGE_PATH | JSON file used when the backend is file |
STORAGE_URL | GET/PUT URL for one JSON document when the backend is http |
STORAGE_TOKEN | Optional bearer token for that URL |
BLOB_READ_WRITE_TOKEN | Vercel Blob read-write token. Vercel injects this for a linked store. Required when STORAGE_BACKEND=blob |
STORAGE_BLOB_PATH | Blob pathname for the account document. Default patent/accounts.json |
Do not create Stripe products or prices in this app. Do not commit secrets.
USPTO key
- Create a USPTO.gov account.
- Verify and link ID.me. That link is one time.
- Open Open Data Portal getting started and request an API key.
- Set
USPTO_API_KEY.
Old PatentsView API keys do not work on the Open Data Portal.
Accounts and storage
Patent tools are stateless searches of United States patents on the USPTO Open Data Portal. Trial and subscription state, OAuth clients, and tokens live in one JSON document behind AccountStore.
memorykeeps that document in the process. It is the default and is what local tests use. It does not survive a restart or a second serverless instance.filewritesSTORAGE_PATH(default./data/patent-store.json). Use it for Docker or a long-running Node process.httpGETs and PUTs the same document atSTORAGE_URL. Point it at storage you already run. This server does not create a database.blobstores the same document in Vercel Blob atSTORAGE_BLOB_PATH(defaultpatent/accounts.json). SetSTORAGE_BACKEND=blobon Vercel. The Blob client usesBLOB_READ_WRITE_TOKEN, which Vercel injects when a Blob store is connected. Reads bypass the CDN cache. Writes sendifMatchand retry when another instance updated the document first.
OAuth clients, authorization codes, access tokens, and refresh tokens are fields in that document. The consent screen posts the authorization request with the approval; nothing about the grant is kept in process memory. Expired codes and refresh tokens are removed on each write.
Deploy
Vercel: the Express app is the default export of api/index.ts. vercel.json sends every path to that function and bundles logo.jpg into it, so /logo.jpg is served by the app and repository files such as /package.json are not static assets. Set the environment variables above, including STORAGE_BACKEND=blob. Point the Stripe webhook at https://<your-host>/billing/webhook.
Docker:
docker build -t patent-mcp .
docker run --env-file .env -p 8787:8787 patent-mcp
What was verified
Locally, over Streamable HTTP: tools/list and each of the four tools, OAuth registration with PKCE, trial expiry, Stripe checkout request shape, and webhook signature verification. No live Stripe charge was made in tests.
Hosted: the server is deployed at https://patent-mcp.vercel.app. tools/list answers without a token, an unsigned tool call returns 401 with a WWW-Authenticate header, /.well-known/oauth-protected-resource returns 200, and /health reports the USPTO key as configured.
Patent by Ouroboros. More from Ouroboros: https://ouroborosapps.com
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Rea
Freeby Morluto · Developer Tools
Reverse engineer anything from your terminal or agent with one CLI and MCP server.
Paperclip
Freeby Paperclipai · Developer Tools
Trending hip-hop artist momentum scores across four cultural dimensions.
Fetch
Freeby Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
